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WHAT IS CLAIMED IS: 

1. A method for providing security mobility between two cellular systems 
comprising: 

generating at least one second ciphering key for a second cellular system, the 
at least one second ciphering key generated by an interoperability authentication center 
at a first cellular system and by a mobile device separately; 

encrypting traffic between the mobile device and the first cellular system using 
at least one first ciphering key for the first cellular system; 

approving a handoff of the traffic of the mobile device from the first cellular 
system to the second cellular system; 

sending the at least one second ciphering key from the first cellular system to the 
second cellular system; and 

performing handoff by the mobile device from the first cellular system to the 
second cellular system, traffic between the mobile device and the second cellular 
system being encrypted using the at least one second ciphering key, wherein ciphering 
of the traffic is maintained during handoff. 

2. The method according to claim 1, further comprising the interoperability 
authentication center storing security related algorithms and information for at least one 
cellular system including the second cellular system. 



3. The method according to claim 1 , wherein the first cellular system comprises 
a Universal Mobile Telecommunications System (UMTS) system. 
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1 4. The method according to claim 1 , wherein the first cellular system comprises 

2 a Global System for Mobile Communications (GSM) system. 

1 5. The method according to claim 1, wherein the second cellular system 

2 comprises an Interim Standard (IS) 41 system. 

%*- 

y3 1 6. The method according to claim 5, wherein the at least one second ciphering 

m 

Nl 2 key comprises a Signaling Message Encryption (SME) key and a Voice Privacy (VP) 

ry 

HJ 3 mask. 

La 

3 | 

1 7. The method according to claim 1, wherein the generating the at least one 

ry 

%S 2 second ciphering key comprises using a Cellular Authentication and Voice Encryption 

6 3 (CAVE) algorithm. 

1 8. The method according to claim 7, wherein the CAVE algorithm uses at least 

2 one of an Authentication (A) key and Shared Secret Data (SSD) to generate the at least 

3 one second ciphering key, the A-key and the SSD used for authentication in the second 

4 cellular network. 

1 9. The method according to claim 1 , wherein at least one first ciphering key is 

2 used in the generating at least one second ciphering key. 
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1 10. The method according to claim 1, further comprising requesting access to 

2 the first cellular system by the mobile device before the generating. 

1 11. The method according to claim 10, further comprising authenticating the 

2 mobile device by the first cellular system after the requesting, the generating being 

3 performed concurrently with the authenticating. 

40 1 12. The method according to claim 1 1 , wherein the authenticating comprises: 

Nf 2 sending an authentication request including an International Mobile Subscriber 

Pj 

U J 3 Identity (IMSI) of the mobile device to an authentication center at the first cellular 

l~ 4 system; 

5 5 generating authentication vectors by the authentication center, the authentication 

£ y 

y3 6 vectors including at least a value and an encrypted version of the value; 
Q 7 sending the value to the mobile device; 

8 encrypting the value at the mobile device to create a response and sending the 

9 response to the first cellular system; and 

10 comparing the response with the encrypted version at the first cellular system, 

1 1 the mobile device being authenticated if the response and the encrypted version are the 

12 same. 

1 1 3. The method according to claim 1 2, further comprising generating the at least 

2 one first ciphering key for the first cellular system by the mobile device. 
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1 14. The method according to claim 12, wherein the at least one first ciphering 

2 key for the first cellular system is part of the authentication vectors. 



1 15. The method according to claim 12, wherein the first sending and the second 

2 sending are performed by a Serving GPRS (General Packet Radio Service) Support 

3 Node (SGSN). 

Q 

03 1 16. The method according to claim 12, wherein the authentication center 

SI 2 comprises a Home Subscriber System (HSS). 

i y 

£± 

1 17. The method according to claim 12, wherein the authentication center 

comprises a Home Subscriber System (HSS). 

18. The method according to claim 12, wherein the generating at least one 
second ciphering key for a second cellular system occurs at the authentication center. 



1 19. A method for providing security mobility between two cellular systems 

2 comprising: 

3 requesting access to a first cellular system by a mobile device; 

4 initiating an authentication of the mobile device; 

5 generating at least one first ciphering key for a second cellular system, the at 

6 least one first ciphering key generated by an interoperability authentication center at the 

7 first cellular system and by the mobile device separately, the interoperability 
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8 authentication center storing security related algorithms and information for at least one 

9 cellular system including the second cellular system; 

10 authenticating the mobile device, traffic between the mobile device and the first 

1 1 cellular system being encrypted using at least one second ciphering key for the first 

12 cellular system; 

13 approving a handoff of the traffic of the mobile device from the first cellular 

14 system to the second cellular system; 

1§3 sending the at least one first ciphering key from the first cellular system to the 

1@1 second cellular system; and 

lfy performing handoff by the mobile device from the first cellular system to the 

m 

lgf second cellular system, traffic between the mobile device and the second cellular 

a — 

1 jpj system being encrypted using the at least one first ciphering key for the second cellular 

2 ft system, wherein ciphering of the traffic is maintained during the handoff. 

O 

1 20. The method according to claim 19, wherein the first cellular system 

2 comprises a Universal Mobile Telecommunications System (UMTS) system. 

1 21. The method according to claim 19, wherein the second cellular system 

2 comprises an Interim Standard (IS) 41 system. 

1 22. The method according to claim 21 , wherein the at least one first ciphering 

2 key comprises a Signaling Message Encryption (SME) key and a Voice Privacy (VP) 

3 mask. 
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1 23. The method according to claim 19, wherein at least one second ciphering 

2 key is used in the generating at least one first ciphering key. 

1 24. An article comprising a storage medium having instructions stored therein, 

2 the instructions when executed causing a processing device to perform: 

3 storing at a first cellular system security related algorithms and information for 

4^ at least one cellular system including a second cellular system; 

o 

|n generating at least one ciphering key for the second cellular system; and 

y§] sending the at least one ciphering key from the first cellular system to the second 

m 

® cellular system before a handoff of traffic from the first cellular system to the second 

5 i 

rr- 

§^ cellular system. 

£ 25. The article according to claim 24, wherein the first cellular system comprises 
D 

2 a Universal Mobile Telecommunications System (UMTS) system. 

1 26. The article according to claim 24, wherein the second cellular system 

2 comprises an Interim Standard (IS) 41 system. 

1 27. An interoperability authentication center in a first cellular system, the 

2 interoperability authentication center having instructions stored therein, the instructions 

3 when executed causing the interoperability authentication center to perform: 
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4 storing security related algorithms and information for at least one cellular system 

5 including a second cellular system; 

6 generating at least one ciphering key for the second cellular system; and 

7 sending the at least one ciphering key from the first cellular system to the second 

8 cellular system before a handoff of traffic from the first cellular system to the second 

9 cellular system. 

28. The center according to claim 27, wherein the first cellular system comprises 

2 a Universal Mobile Telecommunications System (UMTS) system. 

rU 

29. The center according to claim 27, wherein the second cellular system 

5 

=2 comprises an Interim Standard (IS) 41 system. 

§ y 

L ;P 30. A system for providing security mobility between two cellular systems 

a 

comprising: 

3 at least one mobile device; 

4 a first cellular network, the first network comprising: 

5 ^ at least one network element, the at least one network element 

6 authenticating each at least one mobile device desiring access to the first cellular 

7 network, traffic between the at least one mobile device and the first cellular system 

8 being encrypted using at least one first ciphering key for the first cellular network; and 

9 an interoperability authentication center (IAuC), the IAuC storing security 
10 related algorithms and information for at least one cellular network, the IAuC capable 
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1 1 of generating at least one second ciphering key for each at least one cellular network, 

12 the at least one mobile device capable of generating the at least one second ciphering 

13 key for each at least one cellular network; 

14 a gateway operably connected to the first cellular network; 

15 a second cellular network operably connected to the gateway, the gateway 

16 transferring an at least one second ciphering key for the second cellular network from 

17 the first cellular network to the second cellular network before a handoff of the traffic 
lj^ from the first cellular network to the second cellular network, after handoff the traffic 
lg5 between the at least one mobile device and the second cellular system being encrypted 
20} using the at least one second ciphering key for the second cellular network, wherein 

2J3 ciphering of the traffic is maintained during handoff. 

M 

Q 

5P 31. The system according to claim 30, wherein the first cellular network 

£ comprises a Universal Mobile Telecommunications System (UMTS) system. 

j s 

1 32. The system according to claim 30, wherein the second cellular network 

2 comprises an Interim Standard (IS) 41 system. 

1 33. The method according to claim 30, wherein at least one first ciphering key 

2 is used in the generating at least one second ciphering key. 
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